Pins matching posted:2026-09-25

The WorldLeaks extortion gang listed Nike on its leak site on 22 January 2026 and then dumped about 1.4TB of what it said were 188,347 internal Nike design and manufacturing files; Nike said only that it was investigating a potential cybersecurity incident.

Nike began sending breach notices on 25 February 2026 about an intrusion, found on 21 January, into a portal hosted by a third-party service provider that exposed customers' contact, order and payment card information; Nike says no full card details or account credentials were taken.

Florida shopper Alix Widmia sued Nike in federal court in Portland on 4 March 2026 on behalf of everyone whose data was exposed in the breach Nike found on 21 January, accusing it of lax security and of waiting until 25 February to warn customers.

A federal magistrate judge in Oregon on 30 April 2026 consolidated the Widmia and Gomez class actions over Nike's January 2026 data breach and appointed interim co-lead class counsel; Nike moved to dismiss the consolidated complaint on 17 July.